MetaMask said all affected Ethereum validators had exited following an unauthorized infrastructure access incident discovered on September 28, and that its wallets were unaffected. According to Foresight News, the crypto wallet application issued an update on November 5 about the incident.
The team said it found no evidence that customers’ staking principal was accessed or withdrawn without authorization. However, an attacker briefly changed the execution-layer reward recipient addresses for some validators, transferring about 0.385 ETH in rewards.
MetaMask said it repaired and strengthened the affected systems on the day of the incident. Wallet users do not need to take action. Some staking customers may experience temporary withdrawal delays or miss rewards, and MetaMask is addressing those effects directly.